[Qa-jenkins-scm] Build failed in Jenkins: reproducible_fdroid_test #200

jenkins at jenkins.debian.net jenkins at jenkins.debian.net
Fri Feb 1 10:25:20 GMT 2019


See <https://jenkins.debian.net/job/reproducible_fdroid_test/200/display/redirect?page=changes>

Changes:

[hans] remove --on-server from completion, it is not a user option

[hans] make signer_fingerprint() accept DER encoded certs

[hans] support APK Signature V2 when apksigner is installed

[hans] fallback to v3 signatures if v1 and v2 are not available

------------------------------------------
[...truncated 52.40 KB...]
.INFO:root:Creating log directory
INFO:root:Creating temporary directory
INFO:root:1 app, 1 key aliases
INFO:root:Processing unsigned/com.politedroid_6.apk
WARNING:root:Ignoring META-INF/MANIFEST.MF from unsigned/com.politedroid_6.apk
WARNING:root:Ignoring META-INF/RELEASE.SF from unsigned/com.politedroid_6.apk
WARNING:root:Ignoring META-INF/RELEASE.RSA from unsigned/com.politedroid_6.apk
WARNING:root:Using Java's jarsigner, not recommended for verifying APKs! Use apksigner
DEBUG:root:JAR signature verified: tmp/sigcp_com.politedroid_6.apk
INFO:root:...successfully verified
DEBUG:root:...no source tarball for com.politedroid_6.apk
INFO:root:Published com.politedroid_6.apk
DEBUG:root:> /usr/lib/jvm/java-8-openjdk-amd64/bin/keytool -list -v -keystore keystore.jks -storepass:env FDROID_KEY_STORE_PASS
DEBUG:root:> /usr/lib/jvm/java-8-openjdk-amd64/bin/jarsigner -keystore keystore.jks -storepass:env FDROID_KEY_STORE_PASS -digestalg SHA1 -sigalg SHA1withRSA stats/publishsigkeys.jar sova -keypass:env FDROID_KEY_PASS
jar signed.

Warning: 
No -tsa or -tsacert is provided and this jar is not timestamped. Without a timestamp, users may not be able to validate this jar after the signer certificate's expiration date (2044-01-30) or after any future revocation date.
INFO:root:published list signing-key fingerprints
.DEBUG:root:> /usr/lib/jvm/java-8-openjdk-amd64/bin/keytool -list -v -keystore /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/dummy-keystore.jks -storepass:env FDROID_KEY_STORE_PASS
DEBUG:root:> /usr/lib/jvm/java-8-openjdk-amd64/bin/jarsigner -keystore /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/dummy-keystore.jks -storepass:env FDROID_KEY_STORE_PASS -digestalg SHA1 -sigalg SHA1withRSA stats/publishsigkeys.jar repokey -keypass:env FDROID_KEY_PASS
jar signed.

Warning: 
No -tsa or -tsacert is provided and this jar is not timestamped. Without a timestamp, users may not be able to validate this jar after the signer certificate's expiration date (2044-11-26) or after any future revocation date.
DEBUG:root:> /usr/lib/jvm/java-8-openjdk-amd64/bin/jarsigner -strict -verify stats/publishsigkeys.jar
WARNING:root:repo_key_sha256 not in config.py, setting it to the signature key fingerprint of 'stats/publishsigkeys.jar'
.DEBUG:root:> /usr/lib/jvm/java-8-openjdk-amd64/bin/keytool -list -v -keystore /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/dummy-keystore.jks -storepass:env FDROID_KEY_STORE_PASS
DEBUG:root:> /usr/lib/jvm/java-8-openjdk-amd64/bin/jarsigner -keystore /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/dummy-keystore.jks -storepass:env FDROID_KEY_STORE_PASS -digestalg SHA1 -sigalg SHA1withRSA stats/publishsigkeys.jar repokey -keypass:env FDROID_KEY_PASS
jar signed.

Warning: 
No -tsa or -tsacert is provided and this jar is not timestamped. Without a timestamp, users may not be able to validate this jar after the signer certificate's expiration date (2044-11-26) or after any future revocation date.
DEBUG:root:> /usr/lib/jvm/java-8-openjdk-amd64/bin/jarsigner -strict -verify stats/publishsigkeys.jar
.localmodule: /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps

----------------------------------------------------------------------
Ran 5 tests in 5.864s

OK
+ for testcase in $WORKSPACE/tests/*.TestCase
+ '[' /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/scanner.TestCase == /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/install.TestCase ']'
+ /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/scanner.TestCase
ERROR:root:Found usual suspect 'firebase' at line 2 at app/build.gradle
ERROR:root:Found unknown maven repo '../../m2/repository' at syncthing-silk/build.gradle
localmodule: /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps
.
----------------------------------------------------------------------
Ran 1 test in 0.039s

OK
+ for testcase in $WORKSPACE/tests/*.TestCase
+ '[' /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/server.TestCase == /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/install.TestCase ']'
+ /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/server.TestCase
INFO:root:rsyncing repo to example.com:/var/www/fdroid
.INFO:root:rsyncing archive to example.com:/var/www/fdroid
.
----------------------------------------------------------------------
Ran 2 tests in 0.003s

OK
+ for testcase in $WORKSPACE/tests/*.TestCase
+ '[' /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/signatures.TestCase == /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/install.TestCase ']'
+ /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/signatures.TestCase
DEBUG:root:Reading 'config.py'
WARNING:root:unsafe permissions on 'config.py' (should be 0600)!
WARNING:root:Using Java's jarsigner, not recommended for verifying APKs! Use apksigner
DEBUG:root:JAR signature verified: /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/repo/com.politedroid_3.apk
DEBUG:root:signature okay: /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/repo/com.politedroid_3.apk
DEBUG:root:Using androguard from "/usr/lib/python3/dist-packages/androguard/__init__.py"
INFO:root:Fetched signatures for '/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/repo/com.politedroid_3.apk' -> 'metadata/com.politedroid/signatures/3'
localmodule: /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps
.
----------------------------------------------------------------------
Ran 1 test in 0.642s

OK
+ for testcase in $WORKSPACE/tests/*.TestCase
+ '[' /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/update.TestCase == /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/install.TestCase ']'
+ /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/update.TestCase
.Result:e0ecb5fc2d63088e4a07ae410a127722
..WARNING:root:Using Java's jarsigner, not recommended for verifying APKs! Use apksigner
WARNING:root:repo/duplicate.permisssions_9999999.apk is set to android:debuggable="true"
WARNING:root:No SDK version information found in repo/no.min.target.sdk_987.apk
.WARNING:root:Using Java's jarsigner, not recommended for verifying APKs! Use apksigner
WARNING:root:repo/duplicate.permisssions_9999999.apk is set to android:debuggable="true"
WARNING:root:No SDK version information found in repo/no.min.target.sdk_987.apk
.WARNING:root:repo/urzip.apk is set to android:debuggable="true"
WARNING:root:Using Java's jarsigner, not recommended for verifying APKs! Use apksigner
INFO:root:Generated skeleton metadata for info.guardianproject.urzip
INFO:root:Generated skeleton metadata for info.guardianproject.urzip
WARNING:root:Unrecognised app field 'Archive Policy' in 'metadata/info.guardianproject.urzip.yml'
WARNING:root:Unrecognised app field 'Donation' in 'metadata/info.guardianproject.urzip.yml'
WARNING:root:Unrecognised app field 'Requires Root' in 'metadata/info.guardianproject.urzip.yml'
..E./usr/lib/python3/dist-packages/git/cmd.py:583: ResourceWarning: unclosed file <_io.BufferedWriter name='/dev/null'>
  else getattr(subprocess, 'DEVNULL', open(os.devnull, 'wb')))
.WARNING:root:repo/../urzip.apk is set to android:debuggable="true"
WARNING:root:Using Java's jarsigner, not recommended for verifying APKs! Use apksigner
.WARNING:root:Using Java's jarsigner, not recommended for verifying APKs! Use apksigner
ERROR:root:JAR signature failed to verify: repo/org.bitbucket.tickytacky.mirrormirror_2.apk

The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled.

Re-run jarsigner with the -verbose option for more details.

ERROR:root:JAR signature failed to verify: repo/org.bitbucket.tickytacky.mirrormirror_2.apk

The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled.

Re-run jarsigner with the -verbose option for more details.

WARNING:root:Archiving org.bitbucket.tickytacky.mirrormirror_2.apk with invalid signature!
INFO:root:Moving org.bitbucket.tickytacky.mirrormirror_2.apk from repo to archive
ERROR:root:JAR signature failed to verify: archive/org.bitbucket.tickytacky.mirrormirror_2.apk

The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled.

Re-run jarsigner with the -verbose option for more details.

WARNING:root:repo/urzip-badcert.apk is set to android:debuggable="true"
ERROR:root:JAR signature failed to verify: repo/urzip-badcert.apk
jarsigner: java.lang.SecurityException: cannot verify signature block file META-INF/CERT

WARNING:root:Skipping urzip-badcert.apk with invalid signature!
WARNING:root:repo/urzip-badsig.apk is set to android:debuggable="true"
ERROR:root:JAR signature failed to verify: repo/urzip-badsig.apk
jarsigner: java.lang.SecurityException: invalid SHA1 signature file digest for AndroidManifest.xml

WARNING:root:Skipping urzip-badsig.apk with invalid signature!
EWARNING:androguard.apk:Missing AndroidManifest.xml
ERROR:root:Failed to get apk information, skipping repo/fake.ota.update_1234.zip
WARNING:root:Skipping 'fake.ota.update_1234.zip' with invalid signature!
.WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
INFO:root:Using APK Signature v2
INFO:root:Using APK Signature v2
WARNING:root:No SDK version information found in SpeedoMeterApp.main_1.apk
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
INFO:root:Using APK Signature v2
INFO:root:Using APK Signature v2
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:No SDK version information found in SpeedoMeterApp.main_1.apk
.WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
EWARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:Using Java's jarsigner, not recommended for verifying APKs! Use apksigner
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:repo/duplicate.permisssions_9999999.apk is set to android:debuggable="true"
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:No SDK version information found in repo/no.min.target.sdk_987.apk
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING:root:'/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
.localmodule: /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps
tmptestsdir /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_create_metadata_from_template70svwvo8
tmptestsdir /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_process_apk_signed_by_disabled_algorithmsalefue5m
USE_ANDROGUARD True
USE_ANDROGUARD False

======================================================================
ERROR: test_getsig (__main__.UpdateTest)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/update.TestCase", line 243, in test_getsig
    sig = fdroidserver.update.getsig('urzip-release-unsigned.apk')
  File "/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/fdroidserver/update.py", line 434, in getsig
    cert_encoded = common.get_first_signer_certificate(apkpath)
  File "/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/fdroidserver/common.py", line 2538, in get_first_signer_certificate
    certs = apkobject.get_certificates_der_v3()
AttributeError: 'APK' object has no attribute 'get_certificates_der_v3'

======================================================================
ERROR: test_process_apk_signed_by_disabled_algorithms (__main__.UpdateTest)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/update.TestCase", line 629, in test_process_apk_signed_by_disabled_algorithms
    archive_bad_sig=False)
  File "/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/fdroidserver/update.py", line 1367, in process_apk
    apk = scan_apk(apkfile)
  File "/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/fdroidserver/update.py", line 1068, in scan_apk
    apk['sig'] = getsig(apk_file)
  File "/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/fdroidserver/update.py", line 434, in getsig
    cert_encoded = common.get_first_signer_certificate(apkpath)
  File "/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/fdroidserver/common.py", line 2538, in get_first_signer_certificate
    certs = apkobject.get_certificates_der_v3()
AttributeError: 'APK' object has no attribute 'get_certificates_der_v3'

======================================================================
ERROR: test_scan_apk_no_sig (__main__.UpdateTest)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/update.TestCase", line 477, in test_scan_apk_no_sig
    fdroidserver.update.scan_apk('urzip-release-unsigned.apk')
  File "/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/fdroidserver/update.py", line 1068, in scan_apk
    apk['sig'] = getsig(apk_file)
  File "/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/fdroidserver/update.py", line 434, in getsig
    cert_encoded = common.get_first_signer_certificate(apkpath)
  File "/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/fdroidserver/common.py", line 2538, in get_first_signer_certificate
    certs = apkobject.get_certificates_der_v3()
AttributeError: 'APK' object has no attribute 'get_certificates_der_v3'

----------------------------------------------------------------------
Ran 16 tests in 46.591s

FAILED (errors=3)
+ cleanup_all
++ date -u
Fri Feb  1 10:25:19 UTC 2019 - cleanup in progress...
+ echo 'Fri Feb  1 10:25:19 UTC 2019 - cleanup in progress...'
+ killall adb
adb: no process found
Fri Feb  1 10:25:19 UTC 2019 - /srv/jenkins/bin/reproducible_fdroid_test.sh stopped running as /tmp/jenkins-script-XHb8PIM9, which will now be removed.

SSH EXIT CODE: 1
Build step 'Execute shell' marked build as failure



More information about the Qa-jenkins-scm mailing list